web
This command configures various Web interface settings.
Syntax
(config-system)# web (web)#
Command |
Description |
---|---|
blocking-duration-factor |
Defines the number to multiple the previous blocking time for blocking the IP address (management station) or user upon the next failed login scenario. |
check-password-history {off|on} |
Enables the device to enforce password history policy (reuse an old password), which prohibits a user from changing its password to any of the user's four previous passwords. |
check-weak-psw {off|on} |
Enables the weak password detection feature, which detects if a user in the Local Users table is configured with a weak password (listed in the Weak Passwords List table). |
csrf-protection {off|on} |
Enables cross-site request forgery (CSRF) protection of the device's embedded Web server. |
deny-auth-timer |
Defines the duration (in seconds) for which login to the Web interface is denied from a specific IP address (management station) for all users, when the number of failed login attempts has exceeded the maximum. |
deny-access-counting-valid-time |
Defines the maximum time interval (in seconds) between failed login attempts to be included in the count of failed login attempts for denying access to the user |
deny-access-on-fail-count |
Defines the maximum number of failed login attempts, after which the requesting IP address (management station) for all users is blocked. |
display-last-login-info {off|on} |
Enables the display of the user's login information upon each successful login attempt. |
enforce-password-complexity {off|on} |
Enforces password complexity for users login and SNMP Community Strings. |
enforce-web-host-name {off|on} |
Enforces access to the device's Web interface through a hostname only, and blocks any attempt to access the Web interface through the device's IP address. |
http-auth-mode {basic|digest-http-only| digest-when-possible} |
Selects HTTP basic (clear text) or digest (MD5) authentication for the Web interface. |
http-port |
Defines the device's LAN HTTP port for Web interface access. |
https-port |
Defines the device's LAN HTTPS port for secure Web interface access. |
invalid-login-report |
Defines how much information is provided in the logged error message when a user attempts to log in to the device with the wrong username or password (i.e., authentication failure). |
local-users-table-can-be-empty {off|on} |
Enables (allows) the deletion of all users in the Local Users table. |
min-web-password-len |
Defines the minimum length (number of characters) of the management user's login password when password complexity is enabled (using the [EnforcePasswordComplexity] parameter). |
req-client-cert {off|on} |
Enables requirement of client certificates for HTTPS Web interface connections. |
secured-connection {http-and-https|https-only|https-redirect} |
Defines the protocol (HTTP or HTTPS) for accessing the Web interface. |
session-timeout |
Defines the duration (in minutes) of inactivity of a logged-in user in the Web interface, after which the user is automatically logged off the Web session. |
user-inactivity-timeout |
Defines the duration (in days) for which a user has not logged in to the Web interface, after which the status of the user becomes inactive and can no longer access the Web interface. |
web-hostname |
Defines a hostname (FQDN) for accessing the device's Web interface. |
web-if |
Defines Web Interfaces (see web-if). |
web-logo-enable {0|1} |
Enables the Web interface to display user-defined text instead of an image (logo). |
web-logo-text |
Defines the text that is displayed instead of the logo in the Web interface. |
web-password-change-interval |
Defines the minimum duration (in minutes) between login password changes. |
Command Mode
Privileged User
Note
For more information on the commands, refer to the User's Manual.
Example
This example enables requirement of client certificates for HTTPS Web interface connections:
(config-system)# web (web)# req-client-cert on